Permission Denied

[goingdev]

I'm inmiddle of converting from the old Google Adwords API to the new Google Ads API.

I'm getting this error using the Google Ads API:

Google.Ads.GoogleAds.V7.Errors.GoogleAdsException: 'Status(StatusCode="PermissionDenied", Detail="The caller does not have permission", 

Please advise.

[Google Ads API Forum Advisor]

Hello there,

Thank you for reaching out to us.

As for the error, can you try following this guide when generating your OAuth2 credentials?

If the issue still persists, please share with us the complete request and response logs with the request ID generated (via Reply privately to author option or via this email: googleadsa...@google.com) so our team can better check on our end.

Regards,

Mark Kevin Albios Google Ads API Team

 

ref:_00D1U1174p._5004Q2JYkvJ:ref

[goingdev]

Any update on this? I sent a private response 3 days ago.

[Google Ads API Forum Advisor]

Hello there,

Thank you for getting back to us and for sharing the logs.

However, the logs provided aren't the logs that we're expecting. In the Google Ads API, you can enable logging by navigating to the Client libraries > Your client library (ex. Java) > Logging documentation, which you can access from this link.

Once those logs are available, please share with us the complete request and response logs with the request ID generated (via Reply privately to author option or via this email: googleadsa...@google.com).

Regards,

[goingdev]

I sent in the full request and response logs last week. Have you received it?

[Google Ads API Forum Advisor]

Hello,

It seems possible you did not receive the most recent message from our team. Please let us know if you have received this message. Our response to your message where you provided your logs is below:

The USER_PERMISSION_DENIED error usually indicates that you are authenticating as a user that does not have access to the account (896-946-5420) specified in your  API request.

Also, since you specified the "login-customer-id": "6139401816", could you confirm if the user / email address you used to generate your OAuth2 credentials indeed has access to the said 6139401816 MCC / manager account?

To avoid the above error, you will need to ensure that the user / email address you used to generate the credentials indeed has access to the account in your request. If the user / email address has access or is associated to the MCC / manager account, you will need to specify the said MCC / manager account's ID as the value of the login-customer-id field.

If the issue persists, could you also share which user / email address it was you used when you generated your credentials?

Regards,
Matt
Google Ads API Team

Matt Google Ads API Team

ref:_00D1U1174p._5004Q2JYkvJ:ref

[goingdev]

I responded to this comment over a week ago with the user / email info. I haven't gotten a response.

I'm disappointed with the response times on this forum.

[Google Ads API Forum Advisor]

Hi,

My colleague responded privately to your message on July 29th and it appears it didn't reach you so I will post his message with some redaction in the forum:


Hi,

Thank you for sharing which user was used to generate the OAuth2 credentials.

Upon checking, the said "admin@thegoinggroup" user does not appear to have access to both the 89xxxxxx420 client and the 61xxxxx16 MCC accounts. You can check which users has access to your accounts by navigating to the TOOLS & SETTINGS > Access and security > USERS > User (column) view.

This is now the reason why you are encountering the permission denied error. To resolve this, you will need to identify a user from the UI view and generate credentials using that user.

Best regards,
 

Peter Laurence Napa Oliquino Google Ads API Team

Regards,

Aryeh Baker Google Ads API Team

ref:_00D1U1174p._5004Q2JYkvJ:ref

[goingdev]

My latest response was August 27th. I did not receive any response after that. 
Please advise.

[Google Ads API Forum Advisor]

Hello,

It appears you did not receive our last message. Our team member, Ernie, provided the message below:
 

Thank you for providing more details to your concern. I am also a member of Google Ads API team and let me provide support to your concern.

Upon further checking on my end, the "ad...@thegoinggroup.com" is not associated to any Google Ads accounts. With this, it appears that there might be an issue on the UI that causing to not add the said user account. With this, I would suggest to reach out to the product team via this link to address the issue on adding user account in the UI that causing the issue on the API.

Regards,
Matt
Google Ads API Team

Matt Google Ads API Team

ref:_00D1U1174p._5004Q2JYkvJ:ref